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(57) Abstract: 

FIELD: communication, computer 
engineering, in particular, cryptography. 
SUBSTANCE: metttod involves generation of 
secret key, splitting data records into N 
blocks, and sequential conversion of blocks 
by running at least one conversion for i-th 
block, depending on value of J-th block, 
where J is not equal to i. In addition after 
generation of secret key method involves 
generation of encryption algorithm depending 
on value of secret key oy running at least 
one conversion operation over i-th block 
Said conversion operation is designed as 
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to known methods of cryptanatysts, including 
differential and linear cryptanalysts. 2 d. 3 dwg 
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The invention pertains to the field of electronic communication and computer technology 
and, more specifically, to the field of cryptographic methods and devices for encryption of 
information. The following terms are used in the group of features of the claimed method: 

- a secret key is binary information known only to a lawful user, 

- subkey - element of a secret key, represented as a group of subkeys, 

- encryption is a process of conversion of information that depends on a secret key and 
converts the initial text to ciphertext, which represents a pseudorandom sequence of symbols, 
from which information cannot be obtained without knowledge of the secret key 

- decoding is a process inverse to the encryption process, decoding ensures restoration of 
the information according to a cryptogram with knowledge of the secret key, 

- a code represents a group of elementary steps of conversion of initial data, using a 
secret key. The code can be implemented in the form of a computer program or in the form of a 
separate device, 

- cryptanalysis - method of calculating a secret key to obtain unsanctioned access to 
encrypted information or development of a method that ensures access to encrypted information 
without calculation of the secret key, 

- cryptanalyst - a person who performs cryptanalysis, i.e., attacks the code, 

- cryptographic integrity is a gauge of the reliability of protection of encrypted 
information and represents the labor required, measured in number of elementary operations 
necessary to restore the information according to a cryptogram, when the conversion algorithm is 
known, but without knowledge of the secret key. In the case of unidirectional conversions, 
cryptographic integrity is understood to mean the complexity of calculating the initial value of a 
block according to its output value. 

- cyclic shift operations, which depend on the subblocks being converted or depend on a 
binary vector - these are operations of a cyclic shift by a number of bits assigned by the value of 
the subblock or by the value of a binary vector; a cyclic shift operation to the left (right) is 
denoted with the symbol "«<" ("»>")> for example, the notation Bi < B 2 denotes a cyclic shift 
operation to the left of subblock Bi by a number of bits equal to the value of the binary vector B2 

- one-place operation - an operation performed on one operand (block of data or binary 
vector), the value of a subblock after performance of a certain given one-place operation depends 
only on its initial value, examples of one-place operations are cyclic shift operations, 

- two-place operation - operation performed on two operands; the result of performance 
of a certain given two-place operation depends on the value of each operand, examples of two- 
place operations are addition, subtraction, multiplication operations, etc., 

- superposition of a subkey on a subblock - this is a procedure of performing a two-place 
operation (*) on a subblock (B) and subkey (Q) and assignment of the result of performance of 
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this operation to the subblock, which is analytically written in the form of the formula B < -B*Q, 
where "<-* is the sign of the assignment operation. 

Methods are known for block encryption of data (see, for example, US Standard DES 
(National Bureau of Standards Data Encryption Standard Federal Information Processing 
Standards Publication 46, January 1977, see also S. Maftik, Mechanisms of Protection in 
Computer Networks - Moscow, Mir, 1993, pages 42-47). In this method, encryption of data 
blocks is performed by forming a secret key, breakdown of the data block being converted into 
two subblocks L and R and a sequential change in the latter by performing an operation of digit- 
by-digit summing modulo 2 on subblock L and with a binary vector, which is formed as an 
output value of a certain function F from the value of subblock R. After this, the blocks are 
transposed in positions. Function F in this method is accomplished by performing transposition 
and substitution operations, performed on subblock R. This method possesses high speed of 
conversions, when implemented in the form of specialized electronic circuits. 

However, the known analog method uses a secret key of small size (56-bit), which makes 
it vulnerable to cryptanalysis based on key selection. The latter is associated with the high 
calculation capacity of modern computers in general use. 

The method closest in technical essence to the one proposed for cryptographic conversion 
of L-bit input blocks of digital data to L-bit output blocks is a method implemented in the RC5 
code, described in the paper of R. Rivest, The RC5 Encryption Algorithm/Fast Software 
Encryption, Second International Workshop Proceedings (Leuven, Belgium, December 14-16, 
1994), Lecture Notes in Computer Science, Vol. 1008, Springer-Verlag, 1995, pages 86-96. The 
prior art method includes formation of a secret key in the form of a group of subkeys, breakdown 
of the input block of data into subblocks A and B and sequential conversion of the subblocks. 
The subblocks are converted by performing one-place and two-place operations on them. As 
two-place operations, modulo 2 n addition is used, where n = 8, 16, 32, 64, and modulo 2 digit- 
by-digit summing. As one-place operation, a cyclic shift to the left is used, in which the number 
of bits, by which the subblock being converted is shifted, depends on the value of the second 
subblock, which determines the dependence of the cyclic shift operation in the current 
conversion step of the subblock on the initial value of the input block of data. A two-place 
operation is performed on the subblock and subkey, and also on two subblocks. A characteristic 
of the prior art method is the use of cyclic shift operations that depend on the value of the input 
block. 
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The subblock, for example, subblock B, is converted by the following method. A digit- 
by-digit summing operation modulo 2 is performed on subblocks A and B and the value obtained 
after performance of this operation is assigned to subblock B. This is written in the form of the 
relation B <- B©V, where the sign "< -" denotes the assignment operation and the sign "©" 
denotes digit-by-digit summing Modulo 2. After this, a cyclic shift operation is performed on 
subblock B by a number of bits equal to the value of subblock A B < - B «< A. A summing 
operation modulo 2 n is then performed on the subblock and one of the subkeys S, where n is the 
length of a subblock in bits B < - B+S mod 2 n . After this, block A is converted similarly. 
Several such steps of conversion of both subblocks are performed. 

This method ensures high rate of encryption, when implemented in the form of a 
computer program. However, the prior art method has drawbacks, namely, during 
implementation for computers with a 32-bit microprocessor, it does not ensure high resistance of 
cryptographic transformation of data to differential and linear cryptanalysis (Kaliski B. S., Yin 
Y. L., On Differential and Linear Cryptanalysis of the RC5 Encryption Algorithm, Advances in 
Cryptology- CRYPTO '95 Proceedings, Springer- Verlag, 1995, pages 171-184). This 
drawback is associated with the fact that the effectiveness of using operations that depend on the 
data being converted, in order to complicate known methods of cryptanalysis, is reduced by the 
fact that the encryption algorithm is known to the cryptanalyst, which enables the latter to 
determine the statistical characteristics of the encryption procedure and to use them in 
performing cryptanalysis. 

The task underlying the invention is to develop a method for encryption of blocks of 
digital data, in which encryption of the input data would be accomplished, so that determination 
of the statistical features of the encryption algorithm by a cryptanalyst would be significantly 
hampered, by virtue of which the resistance to known methods of cryptanalysis is increased, 
including differential and linear cryptanalysis. 

This task is achieved in that, in the method for cryptographic conversion of blocks of 
digital data, consisting of formation of a secret key, breakdown of a data block into N>2 
subblocks and sequential conversion of the subblocks by performance on the subblock of at least 
one conversion operation, which depends on the value of the input block, the new feature 
according to the invention is that, after formation of the secret key, an encryption algorithm is 
additionally formed as a function of the secret key. 
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By virtue of this solution, a significant complication in determining the statistical features 
of the encryption algorithm by cryptanalysis is ensured, by virtue of which increased resistance 
of the cryptographic conversion to known methods of cryptanalysis is ensured. 

It is also new that one of the subblocks is additionally converted by accomplishing 
substitution operations on it, which depends on the input block and is performed according to 
secret substitution tables. By virtue of this solution, an additional increase in cryptographic 
integrity relative to known methods of cryptanalysis is ensured. 

It is also new that the encryption algorithms are formed by formation of operations that 
depend on the input block. 

By virtue of this solution, an additional increase in cryptographic integrity relative to 
known methods of cryptanalysis is ensured. It is also new that the encryption algorithm is 
formed by formation of substitution operations that depend on the input block and are 
accomplished according to secret substitution tables. 

Owing to this solution, an additional increase in cryptographic integrity relative to known 
methods of cryptanalysis is ensured. 

The essence of the claimed invention is explained in greater detail below by examples of 
its accomplishment, with reference to the appended drawings. 

Figure 1 shows a generalized diagram of a cryptographic device for encryption of blocks 
of digital data according to the claimed method 

Figure 2 shows an encryption scheme corresponding to example 1 
Figure 3 shows an encryption scheme corresponding to example 3 

The claimed method can be implemented with the computer of a calculation device, 
represented by the block diagram in Figure 1, where 
block 1 is the input device for the secret key, 

block 2 is the unit for formation of the machine code of the encryption program (cipher 
setup unit), 

block 3 is the memory unit of the encryption device, 

block 4 is the operating unit of the encryption device, containing three, four or more 
registers, 
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block 5 is the encryption device, 

6 is a transmission line of information signals of the secret key of the user, 

7 is a transmission line of information signals on the formed machine code of the 
encryption program and secret key, 

8 is a transmission line of information signals of the subkeys and transmission of 
information signals of the input data and information signals of the subblocks being converted, 

9 is the address line, 

10 is the transmission line of information signals of the machine code of the encryption 
program, 

1 1 is the input line of the input data, 

12 is the output line of the ciphertext. 

Formation of the secret code can be accomplished directly by introducing it to the 
ciphering system or the working memory of the computer, for example, from a removable 
information carrier. The input data block is broken down into subblocks, for example, by 
representation of the subblock in the form of a group of subblocks written according to fixed 
addresses in the memory unit 3. 

Using block 1 , a secret code is introduced, the information signal of which is fed along 
line 6 to the input of block 2. In block 2, the encryption algorithm is formed as a function of the 
secret key, i.e., a machine code of the encryption program is generated under the control of the 
secret key. Formation of the encryption algorithm is accomplished so that any modification of 
the encryption algorithm includes breakdown of the block of digital data into subblocks and 
sequential conversion of the subblocks by performing a two-place operation on the subblock and 
subkey and performance on the subblock of a conversion operation that depends on the input 
blocks. 

The information signal of the secret key and the information signal of the machine code 
of the encryption program are sent along line 7 to the memory block 3. After this, the encryption 
device 5 contains in the memory a secret key and a machine code that implements the formed 
encryption algorithm and is ready to perform the encryption operations. This initialized state of 
the device is retained throughout operation of a lawful user. The input block of digital data is 
introduced along line 1 1 to the operating block 4, and then along line 8 to the memory block 3. 
The ciphertext block is read out from line 12. The codes of the machine commands to perform 
the conversion procedures are transmitted along line 10 to the operating block 4. On completion 
of encryption of the data, the user disengages the encryption device, which leads to automatic 
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erasure of the secret key and the formed machine code of the encryption algorithm from the 
memory region of block 2 and block 3, since power supply of all the blocks of the encryption 
device is cut off. Thus, the specific modification of the encryption algorithm, and also the secret 
key, are inaccessible to a potential cryptanalyst, who only knows the algorithm of formation of 
the encryption algorithm. This significantly hampers determination of the statistical 
characteristics of the specific modification of the encryption algorithm. At a number of 
potentially performable modifications equal to or greater than 10 , the claimed method of 
encryption ensures high resistance to all known cryptanalysis methods. 

Formation of the encryption algorithm can be accomplished as follows. Initially, based 
on one of the known algorithmic languages, a program template is compiled. Locations in which 
the possibility of writing any of a certain set of operations (for example, two-place operations or 
cyclic shift operations that depend on the input block) is provided, are reserved in the program 
template. All the reserved sites (under conversion operations) are numbered. In sequence, 
beginning from the first, conversion operations are formed for all reserved sites as a function of 
the value of the element of an additional pseudorandom sequence, having a number that 
coincides with the number of the operation being set up. Generation of the pseudorandom 
sequence of necessary length is accomplished as a function of the secret key, for example, using 
pseudorandom number generators described in the paper of Brikell E. F., Odlishko Z. M, 
Cryptanalysis: Review of Recent Results, TIIER, 1988, Vol. 76, No. 5, pages 87-89. 

Formation of conversion operations is accomplished, for example, as follows. The two- 
place operation, used to superimpose the subkey on the subblock, is established as an operation 
of digit-by-digit summing modulo 2 (©), if dj mod 3 = 0, where dj is the value of the 
corresponding element of the additional pseudorandom sequence, or as an operation of summing 
Modulo 2 32 (O), of dj mod 3 = 1, or as an operation of subtraction Modulo 2 32 (-), if dj mod 3 = 
2. In the procedures of setting up the decoding algorithm, the operations that are inverse relative 
to the corresponding operations set up in the encryption algorithm are set up. For this purpose, 
the binary operation and the decoding algorithm are established as an operation of digit-by-digit 
summing Modulo 2 (©), if dj mod 3 = 0, or as an subtraction operation modulo 2 32 (-), if dj mod 
3 = 1, or as a modulo 2 32 summing operation (+), if dj mod 3 = 2. 

After this, as in the encryption program written in the algorithmic language (for example, 
in SI language or Pascal), the conversion operations are established in all the reserved sites, the 
machine code is generated corresponding to the encryption program, using, for example, a 
translator that converts the program compiled in algorithmic language to a sequence of machine 
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commands. The secret key and machine code of the encryption program are written in the 
working memory of the computer (or a specialized digital device) and are found there 
permanently throughout operation of a given user, performing conversion of blocks of data 
arriving for encryption. The complexity of the procedure of formation of the encryption key and 
generation of the machine code of the encryption program does not affect the encryption speed, 
since this procedure is performed once during identification of the user, according to a password, 
at the moment of engagement of the digital device or call-up of the encryption program. 

An additional increase in cryptographic integrity of encryption is achieved during 
assignment of formation of the conversion operations, depending on the data being converted. 
For example, for positions reserved under a one-place operation on one of the 32-bit subblocks 
being converted - subblock Bi, formation of one of the following operations can be assigned: (1) 
substitution operations ( l S v ) on 8 younger binary bits (with numbers from 1 to 8) of a subblock, 
performed according to a v-th substitution table, the number of which is chosen as a function of 
subblock Bj, where i ^ j, (2) by a similar substitution operation of ( 2 S V ) on binary bits of the 
subblock with numbers from 9 to 16 inclusive, (3) cyclic shift operations to the left («<iV) of t 
the contents of the subblock by a number of bits equal to V = Bi mod 32, where I ^ j , (4) cyclic 
shift operations to the left («<2V) of the contents of the younger 16 binary bits of the subblock 
by a number of bits equal to V = Bj mod 16, where i ^ j, (5) cyclic shift operations to the left 
(<« 3 V) of the contents of the younger 8 binary bits of the subblock by a number of bits equal to 
the value V = Bi mod 8, where i ^ j, (6) cyclic shift operations to the left (<« 4 V) of the contents 
of the binary bits from 9 to 16 inclusive, of the subblock by a number of bits equal to the value V 
= Bj mod 8, where //illegible//. 

After this, as in the encryption program written in algorithmic language (for example, in 
SI or Pascal language), the conversion operations are established in all reserved sites, a machine 
code is generated corresponding to the encryption program, using, for example, a translator that 
converts the program compiled in algorithmic language to a sequence of machine commands. 
The secret code and machine code of the encryption program are written in the working memory 
of the computer (or specialized encryption device) and are found there constantly throughout the 
operating time of the given user, performing conversion of blocks of digital data arriving for 
encryption. 

The complexity of the procedures for formation of the encryption key and generation of 
machine code of the encryption program does not affect the rate of encryption, since this 
procedure is performed once during identification of the user according to a secret key at the 
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moment of engagement of the encryption device or call-up of the encryption program. In 
modern computers, the procedure of formation of an encryption algorithm in the form of a 
machine code of an encryption program can be easily automated and implemented in the form of 
an initialization program of the encryption module. The time required to perform the 
initialization program is from 0.03 to 0.5 sec, depending on the specific variant of the claimed 
method, which is acceptable for most applications of information protection systems. 

The decoding program of the blocks of the cryptogram is formed similarly. The 
encryption and decoding program corresponding to it form a single cryptographic program. For 
machine coding, the cryptographic program is written in the working memory of the computer, 
which, under its control, performs the encryption and decoding procedure of the blocks. The 
encryption procedure and encryption key are formed as a function of the secret key (password) 
of the user, i.e., are unique, which ensures high complexity of cryptanalysis. 

An important type of operation that depends on the data being converted is represented 
by substitution operations accomplished according to tables, selected as a function of the input 
block. Let the substitution operation be performed on subblocks of digital data with a length of 
k-bit, where k is an integer. During assignment of the substitution operation that converts the k- 
bit input subblock to a k-bit output subblock, the use of a table containing two lines of numbers 
is then required 

0 12...N-1 

ao ai a 2 ... a N -i, 

where N = 2 k . 

All possible values of the k-bit block are present in this table in the lower line exactly 
once, but in an arbitrary sequence. The sequence of positioning of the numbers in the lower line 
determines the specific variant of the substitution table and, consequently, the specific variant of 
the substitution operation performed using this table. Performing of a substitution operation is 
accomplished as follows. The number equal to the value of the input block is selected in the 
upper line. The value located beneath this number in the lower line is taken as output block. 
Thus, the substitution table can be placed in the working memory of the computer as a sequential 
writing of k-bit computer words, placed in cells with addresses Wo, Wi, W 2 , ... Wn-i. In this 
case, the value of the input block b serves to calculate the address Wo + b of the word that is 
taken as output block. This method of presentation of the substitution table requires the use of a 
memory volume equal to kN-bit. 
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We select the number of substitution tables equal to 2 (the volume of required memory 
here is 2 L kN bit) and place the substitution tables directly next to each other. As address of the 
table with number V 5 we take the value of the address W 0 of its first k-bit word. Let the address 
of the table with number 0 be s. In this case, the address of the substitution table, with an 
arbitrary number V, equals s + VN. If the number of the current substitution table V and the 
current input subblock are assigned for performance of the substitution operation, it is performed 
by replacement of the current input block by a k-bit word, situated according to the address s + 
VN + b, where b is the value of the subblock, on which the current substitution operation is 
performed. Using this relation, it is easy to assign selection of the substitution table with number 
V and to perform substitution in the subblock with value b. In the considered case, assignment 
of the dependence of the substitution tables on the value of the binary vector and performance of 
the substitution operation are accomplished by the microprocessor very quickly during selection 
of the corresponding values of parameters L and k, for example, when L = 5 and k = 8. With the 
indicated parameters for positioning of the substitution tables, 8 kbyte of working memory is 
required, which is acceptable, since modern computers have a volume of working memory many 
orders of magnitude greater than this value (from 1 to 64 Mbyte and more). 

The possibility of technical implementation of the claimed method is explained by the 
following specific examples of its accomplishment. 

Example 1 

Let L = 5 and k = 8; these give 32 tables, assigning substitution operations over 8-bit data 
subblocks. The tables we will assume to be known, i.e., the person attempting to perform 
cryptanalysis knows these tables. We form a secret key, represented in the form of a group of 8R 
16-bit subkeys 

qio • qu • • . qn (first line of subkeys) 

q2o . qn ... 427 (second line of subkeys) 

qio . qn ... q r 7 (r-th line of subkeys) 

4RO . q R i ... 4R7 (R-th line of subkeys), where R is the number of encryption rounds 
In the r-th round of encryption, the r-th line of subkeys is used. 

We denote the employed substitution tables as follows TO, Ti, T2 . . . T3 1, and the 
substitution operation assigned by table T v as S v , where v = 0, 1, 2. 31 substitution tables To, Ti, 
T2, T15 can be chosen arbitrarily and tables Ti6, Tn ... T31 chosen so that the substitution 
operations S v and S31-V are mutually inverse. The latter condition is fulfilled, if the pairs of tables 
Ti6 and T15, T17 and T14, Tjg and T13, T31 and To will assign mutually inverse substitution 
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operations. For the set of arbitrary substitution tables To, Ti, T 2 , T 5 , it is easy to compile tables 
corresponding to the inverse substitution operations. For example, for the substitution operation 
assigned by the following table 

0 1 2 255 

ao ai a 2 a 255 , 

while the inverse substitution is assigned by the table 
0 1 2 255 

2 0 [Should be Z 0 - Translator], Z\ Z 2 2255, 

where the line (Zo, Zi, Z 2 , Z 255 ) is obtained as the upper line after ordering of the columns 
of the preceding table in the order of increasing numbers in the lower line. 

Figure 2 shows a scheme of the arc encryption round, where the solid vertical line 
corresponds to transmission of 16-bit data subblocks, the dashed line corresponds to transmission 
of a binary vector V, formed as a function of the value of one of the subblocks being converted, 
the horizontal solid line corresponds to transmission of a 16-bit subkey. The two-place operation 
performed over the subblock and subkey, designation of the block, in which the symbol ("•") 
indicates a two-place operation, formed in the stage of formation of the encryption algorithm and 
established as one of the following operations "©", "+" or The subscript in the symbol "•" 
denotes the number of the two-place operation. 

The one-place operation, performed over the subblock and formed in the stage of 
formation of the encryption algorithm, is denoted by the block, in which the symbol "«<C" is 
indicated. This one-place operation is established as a cyclic shift operation to the left from the 
number of bits equal to the value of parameter C. In all, 16 different types of cyclic shift 
operations to the left are possible, which are determined by the value of the parameter C = 0, 1, 2 
... 16. The subscript in parameter C denotes the number of the one-place operation. All the 
reserved operations "1", "2", "8R-1", "8r" and "«<Ci" "«<C 2 ", "«<C 8R _r\ "<«C 8R " are 
formed as a function of the secret key and the sequential number. For the number of encryption 
lines equal to R = 4, 3 8R 16 8R = 48 8R - 48 32 (about 10 53 ) different modifications of the encryption 
algorithm are potentially performable. Choice of the specific modification is determined by the 
choice of the secret key. This number of modifications is fairly high, which determines the 
uniqueness of the encryption algorithm for each user (or pair of users, using the same secret key 
for transmission of information along communication lines). 
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Block S denotes the operation of substitution, performed as a function of the input block 
according to the table with number V qro, q r i, q r 7 - subkeys used in the r-th round. The arrows on 
the lines denote the direction of transmission of the signals. 

Example 1 corresponds to encryption of blocks of digital data with a dimension of 128- 
bits. Encryption is performed as follows. The input block is broken down into 8 subblocks bo, 
bi . . . b7 with a size of 16-bit each. After this, in the first round (r = 1), a one-place operation 
u «<Ci" is accomplished over subblock bo, then over subblock bo, and with subkey qio the two- 
place operation V is performed, the binary vector V is formed, having a value of 5 younger 
binary digits of subblock bo V < - bo mod 2 5 . 

After this, conversion of subblock bi is performed. The operation "«<C2" bi < - bi 
«<C2 is performed. Then over bi and with subkey qn, the operation "2" is performed, and the 
output value of this operation is assigned to block Vj, which can be written analytically bi < - bi 
*2 qn- Then according to the substitution table with number V, the substitution operation is 
performed over subblock bi bi < - S v (bi). Then according to the value bi, the binary vector V is 
formed (for conversion of the next subblock) V < - bi mod 2 5 . After this, conversion of subblock 
b 2 b2 < - b2 «<C3 . b2 < - b2 *3 412, and then b2 < - S v (b 2 ). Similarly, conversions of the 
subblocks b3, b4, bs, be and b7 are carried out. In the last step of each round of encryption, 
rearrangement of the subblocks in inverse order is carried out, i.e., blocks b 7 and bo, be and bi, bs 
and b2, b4 and b3 change places in pairs. The second round is performed similarly, except for the 
fact that, instead of the first line of the subkeys, the second line of the subkeys is used. The third 
encryption round is then performed, using the third line of the subkeys, etc. In all, R rounds of 
encryption are carried out, where R = 4. The next algorithm represents a logic form for writing 
example 1. 

Algorithm 1 

Input 128-bit input block of digital data, represented as a concatenation of 16-bit 
subblocks 

3S Lt> lb lb» Jb Jb Jb 

orir 2 i 3H 1 su'7 } where the "|" denotes the concatenation operation 

1 Determine the number of encryption rounds R = 4 and counter of the number of rounds 

R= 1 

2 Determine counter i = 1 

3 Convert subblock bo bo < - bo «<CBr7. 
bo < - bo*8r-7 q ro 

4 Form the binary vector V V < - bj.i mod 2 5 
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5 Convert the subblock bi bi < - bi «<C8r-7+i 

bl<C8r-7+l 

bi < - ^vCbi), where the substitution operation *Sv is performed with the substitution table 
with number V 

6 Form the binary vector V V < - bi mod 2 5 

7 If i ^ 7, then increase i < - i+i and go to point 5 

8 If r * R, then increase r < - r+1 , otherwise go to point 10 

9 Switch the subblocks in inverse order and go to point 2 

10 STOP 

Output 128-bit ciphertext block. The next algorithm describes the decoding procedure. 
Algorithm 2 

Input 128-bit input block ciphertext ol x t% 31 * *' fil 7 

1 Establish the number of encryption rounds R = 4 and the counter of the number of 
rounds r = 1 

2 Establish the counter i = 1 

3 Form the binary vector V V < - bj-i mod 2 5 

4 Store the value bi and the variable g g < - bi 

5 Convert subblock bi bi < - ^i-vCbi) 
bi<-bi(*) 8r v7+iqr'i, 

bo<-b 0 >Cg r '.7+l qr'O, 

where 

r' = 5 - r "»>C" - cyclic shift operation to the right by C bit and //illegible// operation, 
inverse operation //illegible// (in operations "«<C X " and ">»C X 5 \ the values of parameter C 
with the same subscripts are established equal. In this case, the pair of operations "«<C X " and 
">»C X " is a pair of mutually inverse operations) 

6 Form the binary vector v v < - g mod 2 5 

7 If i * 7, increase i <- i+1 and go to point 4 

8 Convert the subblock bo bo < - bo (*)8r-7 qro 
bo < - bo >»C 8r -7 

9 If r * R, then increase r < - r+1 5 otherwise go to point 1 1 

10 Switch the subblocks in reverse order and go to point 2 

11 STOP 

Output 64-bit block of initial text 
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During program implementation, algorithm 1 and algorithm 2 that implement the claimed 
method ensure an encryption rate of about 30 Mbit/s for Pentium 200 microprocessors. If 
necessary, a different number of rounds can be assigned, for example, R = 2, 3, 5, 6. 

Example 2 

This example is similar to example 1, the only difference being that the employed 32 
substitution tables are secret, for example, they are formed as a function of a secret key. This 
variant is easy to implement during use of a computer for encryption of data by formation of 
substitution tables with a special program during input of a secret key to the encryption module. 
Formation of the secret tables can be accomplished, for example, by modifying the known 
(previously assigned) substitution tables by block encryption according to a secret key of 
elements of the lower line of the known tables (since block encrypting conversion is a 
substitution, the modified tables will also be substitution tables). 

Example 3 

This example is also similar to example 1 and is explained in Figure 3. The only 
difference is that, instead of the formed substitution operation ^v, one-place conversion 
operations are used that depend on the binary vector V (V, in turn, depends on the input block of 
digital data), which are denoted as "(<S<)" and are formed in the stage of formation of the 
encryption algorithm. Subscript j denotes the number of the position of the operation "( < S<)"- 
The operations "(<S<)" are established as a function of the values of j (j = 1, 2, 7R, where R is 
the number of encryption rounds) and under secret key as one of the following five operations 
" ! S V ", " 2 S V ", "«< 2 V", "<« 3 V", "«< 4 V". All the listed operations are dependent on the input 
block. Each of the given operations is performed as a function of the converted data block, since 
it depends on the binary vector V. If, in a certain position originally reserved under the operation 
"(<S<)" a substitution operation is established, then it is performed according to a table with 
number V, if a cyclic shift operation is established, it is performed with a cyclic shift by V-bit. 
The number of possible modifications of the encryption algorithm in the given example is 5 7R 
times greater than in example 1, which amounts to about 10 , where R = 4. 

Example 4 

This example is similar to example 3, the only difference being that the employed 32 
substitution tables are secret, for example, they are formed as a function of the secret key. This 
variant requires compilation of a more complex program for formation of the encryption 
algorithm, but it permits an increase in cryptographic integrity of encryption with retention of 
high encryption rate. 
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The cited examples demonstrate that the proposed method for cryptographic conversions 
of blocks of digital data can be technically implemented and permits solution to the posed 
problem. 

The claimed method can be implemented, for example, on personal computers, and 
ensures the possibility of creating on its basis high-speed program modules for encryption and 
replacement of costly specialized encryption equipment with a personal computer equipped with 
a program system for high-speed encryption. 



Claims 

1 . Method for encryption of blocks of digital data, consisting of formation of a secret key, 
breakdown of the data block into N>2 subblocks and sequential conversion of the subblocks by 
accomplishing on the i-th subblock at least one conversion operation, which depends on the 
value of the j-th subblock, where j * i, characterized by the fact that, after formation of the secret 
key, the encryption algorithm is additionally formed as a function of a secret key by formation of 
at least one conversion operation that is accomplished on the i-th subblock as a function of the j- 
th subblock. 

2. Method according to Claim 1, characterized by the fact that the conversion operation is 
formed in the form of a substitution operation. 
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UM<J>poBbix AaHHbtx Cnoco6 3aiuiK>HaeTCfl b 
4>opMnpOBaHMM ceKpemoro vjuwa, pa36neHnn 
6noxa AaHHbix Ha N > 2 iiqaojiokob m 
noonepeAHOM npeo6pa30BaHnn noAO/iOKOB 
nyreM ocymeciB/ieHMfl HaA hum hoaoViokom no 
KpaftHeft Mepe oahom onepaunn 
npeo6pa30BaHnq, KOTopaa 3aBMCMT ot 3Has6Hnn 
J-ro noASnoKa, tap J*t. npuneM nocne 
<t)opMnpoBaHnn ceKpeTHoro toiioHa 
Aono/iHtiTenbHo (fcopMMpyiOT a/iropMTM 
nin4)pOBaHMH 8 3aBncnMocrn ot ceKpeiuoro 
Kfitona nyTeM cfcopMMpOBaHMH no KpaftHeu Mepe 
oahom onepauuM npeo6pa30Banun , KOTopyio 

OCyLUeCTB/lflKDT HaA i-TbIM nOAGflOKOM B 



3aBMCMM0CTM ot j-ro noA&ioKa, a onepauwo 
npeo6pa30BaHnn <J>opMMpyiOT b BMAe onepaunn 
noAcraHOBKM, npti 3tom AOCTwraeTcn 

TeXHMHeCKMM peSy/lbTaT, COCTOWIUMM B 
nOBbllLieHHM CTOMKOCTH K M3BeCTHbJM M&TOfljclM 

KpnnToaHa/ii43a, ax/nonaa An<t>0epeHMManbHbiM 

M JlMHGMHbJM KpnnTOaHaJlM3 1 3 n <t>-Jlbl, 3 MJ1 
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M3o6peTeHne othocwtch k 06/iacTM 

3/ieKTpOCBR3M H B bHMCJlMTe/lbHOM T6XHMKM, a 

KOHKpeTHee k o6/iacrvi Kpurrrorpac^nMeciaix 
cnoco6oB m ycTpOMCTB aha Liiki^poaaHvin 

C006meHMM (MKCt>OpMaUMM) B COBOKynHOCTM 

npnaHaKOB 3aRBJiR6Moro cnoco6a ncnojib3yK>Tcn 
c/ieAytomne tgpmmhu 

• ceKpeTHbifi toitOH npeACTaB/iRer co6om 

ABOMMHyK) MH0OpMaUMK), M3B6CTHyK) TOJlbKO 

3axoHHOMy no/ib30BaTe^K), 

• nofljcntoM - sneMeHT cexpeTHoro K/ifosa, 
npeAdaBJieHHoro xax coeoKynHOCTb noAKiuoMeS, 

uiH(J>po8aHne ecrb npouecc 
npeo6pa30BaHnq MH<t>opMau>w, kotopum 
3aBncm ot ceKpeTHoro tonosa n npeo6pa3yeT 

MCXOAHUM TeKCT B LiIHO>pTeKCT, 

npeACTaBJiRtoiUMki co6om nceBAOcjiynaMHyio 
nocjieAOBaie/ibHOCTb 3H3kob, m3 kotodom 
no/iyneHMe MH(t>opMau>iM 6e3 3HaHkin ceKpeTHoro 
x/iiOHa npaKTvmecKH HeocymecTBHMO 

• AeujH^pOBaHne ecTb npouecc, o6paTHwii 
npoueAype wn(J)pOBaHMfl, Aeiiinc^pOBaHne 
o6ecneHMBaeT BOccraHOBJieHkie nH(J>opMauMM 
no KpunTorpaMMe npw 3HaHnn ceKpeTHoro 

KJIIOMa, 

- ujM<J)p npeACTaB^neT cooofi coBOKynHOCTb 
3iieMeHTapHbix waroB npeo6pa30BaHMH 
bxoahwx ASHHbix c ncnojib30BaHweM ceKpeTHoro 
foifona, uivifyp MOxceT 6bm> peajiM30BaH b BHAe 
nporpaMMbj 36M wm b BHAe OTAe/ibHoro 

yCTpOMCTBa, 

- Kpn nToaHa/i M3 - MeTOA BbiHMCJieHMfl 
ceKpeTHoro xmosa ajib no/iyHeHMH 
HecaHKUHOHnpoBaHHoro AOCTyna k 
3atun4)pOBaHHOM MH^opManwn mam paapa6oTKa 
MeTOAa, o6ecnesnBaiomero AOCTyn k 

3aLUH(t)pOBaHHOM VtH(|>0pMaUMV1 6e3 BblMMC/ieHMfl 

ceKpeTHoro laitona, 

- KpurrroaHaJinTviK - jiuuo, Bbino/wflioiuiee 
KpnnToaHELnn3, t e aTaxyramee uiw(J)p, 

- KpM nTOCTOM KOCTb HBJlfleTCH MepOM 
H3Ae)KHOCTM 3aiAMTbl 3aUJMCt)pOBaHHOM 

MH4>opMauMM m npeACTas^neT coooii 
TpyAoeMKOCTb, n3MepeHHyio b KOJinsecTBe 
3/ieMeHTapHbix onepauHM, KOTOpbie Heo6xoAHM0 

BbinOHHMTb A^ BOCCTaHOBJieHMq MH(J)OpMaUHM 

no KpumorpaMMe npw 3HaHnn anropMTMa 
npeo6pa30BaHMfl, ho 6e3 3HaHnn ceKpeTHoro 
loiiOHa, b c/iynae oahoctodohhmx 
npeo6pa30BaHnvi noA KpunTOdoPiKOCTbio 
noHMMaeTcn c/ioxhoctb BbiHMCJieHHH BxoAHoro 
SHaseHMfl 6/iOKa no ero BwxoAHOMy 3HaHeHwo, 

onepauMM unioiMHecKoro CABura, 
3aBMCRmne ot npeo6pa3yeMbix noAbVioxoB win 
3aBncnmne ot abohhhoto BexTOpa - sto 
onepaunn unK^nsecKoro CABura Ha hwcjio 6ht, 
3aAHBaeMoe 3HaHeHneM noAS/ioxa win 
3HaneHMeM abommhofo Bexropa, onepaunn 
UMK/iMsecKoro CABura B/ieBo (BnpaBO) 

0603HaHaK)TC« 3H3K0M " <«" {**»>"), 

HanpHMep, 3anncb Bi<B2o6o3HanaeT onepaunfo 
UumiHHecKoro CABura aneBo noA6/ioxa Bi Ha 

HMCJ10 6HT, paBHOe 3HaHeHI4f0 ABOMMHOrO 

sexTOpa B2. 

- OAHOMecTHan onepauwa - 3to onepau>iq, 
Buno/iHneMan hsa oahmm onepaHAOM (6/iokom 
AaHHbix wm ABOMHHbiM sexTOpOM), 3HaseHiie 
noA6/ioxa noc/ie Bwno/iHeHmi HexoTOpo^ 

A3HHOV1 OAHOMeCTHOM OnepaUMM 3aBMCMT TO/lbKO 

ot ero Hana/ibHoro 3HaMeHMfi, npMMepOM 
OAHOMecTHux onepauMM RB/rniOTcn onepaunn 
UMicnuHecKoro CABura, 

• AByxMecTHan onepauiiR - 3to onepauMR, 
Bbino/iHneMsm hsa AByMn onepaHAaMn, 
pe3y/ibTaT Bbino^HeHvifl HexoTopoft ashhom 
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AByxMecTHOM onepauMM saBMcuT ot 3HaseHnn 
KaxAoro onepaHAa, npuMepOM AflyxMecTHwx 
onepauufi RB/ioiOTCfl onepaunn anoxeHMH, 

BUMMTaHMR, yMHOXeHHR MAP . 

• Ha/ioxeHne noAKntoMa Ha noA6/iox - sro 
npoueAypa Bbino/iHeHHR AByxMecTHoPi 
onepauMM {*) HaA noA6/ioxoM (B) m noAKniOMOM 
(Q) n npuCBanBaHUH pe3y/ibTaTa Bbjno/iHeHnq 
3tom onepauMM noA6noxy, hto aHaiiMTuneCKvi 
3anncbtBaeTcn b bma@ 4>opMy/ibJ B <- B*Q, 
tab " <- " - 3Hax onepauMM npuceaviBaHUfl 

M3BecTHbi cnocoSbi 6/iOHHoro iiiM(t)pOBaHnq 
AaHHbix, cm , HanpMMep, CTaHAapr CLUA DES 
[National Bureau of Standards Data 
Encryption Standard Federal Information 
Processing Standards Publication 46, January 
1977, cm Taioxe C MacfrruK MexaHM3Mbi 
aamnTbi b cerex 3BM- M. Mnp ( 1993 C 
42-47] B AaHHOM cnoco6e LUM0pOBaHne 6/iokob 
AaHHtjx Bbino/iHRiOT nyreM (J)OpMMpOBaHviq 
cexpeTHoro xntona, pa36neHMfl npeo6pasyeMoro 
6/iOKa AaHHux Ha ABa noASnoxa L m R h 
noosepeAHoro M3MeHeHnq noc/ieAHvix nyieM 
Bbino/iHeHnq onepaunn nopaapaonoro 
cyMMMpOBaHMq no uopym ABa HaA noA6jioxoM 

L M ABOMHHbIM BeKTOpOM, KOTOpbIM 

4)0pMnpyeTcq xax BbixoAHoe 3HaneHne 

HeKOTOpOM Ct>yHKUMM F OT 3HaHeHMH noA6/iOKa R 

noc/ie 3Toro 6jiokm nepecTaB^HioTcn MecTaMM 
<l>yHKu>ifl F b yxa3aHH0M cnoco6e peajiM3yeTCH 
nyreM BbinoxiHeHnq onepaunPi nepecTaHOBKM m 
noAdaHOBKM, Bbino/iHneMbJx hba noA6noxoM R 
flaHHbiM cnoco6 o6/iaAaeT bncokom ckopoctuo 
npeo6pa30BaHvi£i npn peann3annn b bhag 
cneMna/iM3MpOBaHHbix ajieKTpoHHbix cxeM 

OAHaxo M3BecTHbift cnoco6-aHa^or 
Mcno^b3yeT cexpeTHwii kakw Ma/ioro pa3Mepa 
(56 6mt), hto Ae/iaeT ero y«3BMMbiM k 
Kp^nToawannsy Ha ocHOBe noAOopa xmosa 
HooneAHee cbr33ho c bwcoxom 

BbJHMC/lMTe/lbHOM MOlUHOCTbK) COBpeMeHHWX 

3BM MaccoBoro npuMeHeHnq 

HanSo^ee 6/im3xmm no CBoeii TexHHHecxoii 
cymHOCTM k 3anB7weM0My cnocooy 
KpnnTorpacJ)HHecKoro npeo6pa30BaHHH 

L-6HTOBUX BXOAHblX G^OKOB UMCjjpOBblX A3HHblX 
B L-0~MTOBbie BblXOAHbie 6^0KM RBnneTCR 

cnoco6, peaJiM30BaHHbJM b iun0pe RC5, 
onMCaHHbiii b pa6oTe R Rivest, The RC5 
Encryption Algonthm/ Fast Software 
Encryption, Second International Workshop 
Proceedings (Leuven, Belgium, December 
14-16, 1994), Lecture Notes in Computer 
Science, v 1008, Spnnger-Verlag, 1995, pp 
86-96 Cnoco6-npOTOTwn BKjnosaeT b ce6n 
$opMMpOBaHne cexpeTHoro fcntona b BMAe 
COBOKynHOCTM noAx^ioneii, pa36neHne exoAHoro 
6/ioxa AaHHux Ha noA^OKn A m B m 
noosepeAHoe npeo6pa3oeaHne nOA6noKOB 
rioA6/iOKn npeo6pa3y»OTC5i nyreM BbinoiiHeHMq 

H3A HMMH OAHOMeCTHblX M AByXMeCTHblX 

onepau>ift B xanecTBe AByxMecmbix onepau>ifi 
ncnojib3yK>Tca onepauMM c/ioxeHnq no MOAy/no 
2 n , tab n = 8, 16, 32, 64, m onepaunn 
nopa3pRAnoro cyMMMposaHnq no MOAyflto 2 B 
KanecTBe oAHOMecixoM onepauuu kicno/ib3yeTCR 
onepaunq untoiHMecKoro CABura B/ieBO, npuseM 
MMOno 6mt, Ha KOTOpoe CABuraeTCfl 
npeo6pa3yeMbiM noAS/iox, saBMCMT ot 3HaneHMn 
Apyroro noASnoxa, sto onpeAejifieT 
3aBMCMMOCTbonepau>ui untoiMHecKoro CABura Ha 
TeKymeM ware npeo6pa30BaHna noA6/ioxa ot 
ncxoAHoro 3H3MeHMfl BxoAHoro 6/ioxa AaHHux 
AByxMecTHan onepaunq Bwno/iHHeTCfl HaA 
noA&noKOM n noAX/iKWOM, a Taxxe HaA AByMq 
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noA6/iOKaMM XapaicrepHbJM Ann 
cnocoSa-npoTomna flB/iqeTca ncno/ib30BaHne 
onepauMM LLMWiMnecKoro CABura, 3aBMCfliueM ot 
3HaHeHMA BxoAHoro 6/ioica 

riQA6noK ( HanpMMep noAonoK B, 
npeo6pa3yiOT cneAytouiMM nyTeM BbinonHaeTca 
onepauMH nopa3pnAHoro cyMMwpoBaHnq no 

MQAVJ1K) 2 H3A nOA6/10KaMM A m B m 3HaMeHne, 

no/iynaeMoe nocne BbinonHeHwa stom 
onepaunn, npMCBaMBaercn nQA6/ioicy B 3to 
3anncbiBaeTC« b bma£ cooTHotueHun 
B BeV, tap 3h3k ° <- u - o6o3HaHaeT 
onepauMio npucBanBaHMR m 3HaK " ® " 
o6o3HaMaeT onepauMio nopa3pqAHoro 
cyMMMpoBaHMfl no mo Ay /no 2 nocne 3Toro HaA 
noAO/iOKOM B Buno/iHAiOT onepauwto 
UMtcnimecKoro CABura Ha hmcjio 6mt, paBHoe 
aHaseHMio noAonoKa A B <- B«<A 3aTeM HaA 
nOA6/lOKOM M OAHMM H3 noAK/iKwew S 
Bbino/iHRiOT onepauwio cyMMMpoBaHwn no 
MOAy/ito 2 n , tap n - AnnHa noA6/ioxa b 
6nTax B <- B+S mod 2 n nocne araro 
aHanorviHHbiM o6pa30M npeo6pa3yeTC« ojiok A 
Buno/iHneTCfl HecKonwco tbkmx ujaroB 
npeo6pa30BaHnq ooomx noA6n0KOB 

AaHHUM cnoco6 ooecneHMBaeT Bucoicyio 
CKOpocTb Lun<t>pOBaHM* npn peann3au,MM a BHAe 
nporpaMMbi Ana 3BM Oah3ko cnoco6-npOTOTnn 
MMeeT HeflocTaTKM, a mmbhho, npn nporpaMMHOii 
peajin3auMM Ann 3BM c 32-pa3p*AHbiM 
MMKponpoueccopoM oh He odecnestiBaeT 
bwcokom ctomkoctm KpMrrrorpa<t>MHecKoro 
npeo6pa30BaHMfl AaHHbix k 

An4)(J)epeHunanbHOMy m jiMHeMHOMy 
KpnnToaHa^M3y [Kaliski B S , Yin Y L On 
Differential and Linear Cryptanalysis of the 
RC5 Encryption Algorithm Advances in 
Cryptology - CRYPTO *95 Proceedings, 
Spnnger-Vertag, 1995, pp 171-184] 3tot 

HeAOCTaTOK CBH33H C TeM, HTO 3<t>0eKTWBHOCTb 

ncno/ib30BaHnq onepaunPi 3aBMCHuiMx ot 
npeoSpaayeMbix AaHHbix c uenbio ycnoacHeHnq 

M3BeCTHblX MeTOAOB KpMriTOaH 3/114351 CHM)KaeTCfl 

TeM, hto ajiropHTM ujn4>poBaHMfl MSBecreH 
KpHnToaHa/iHTwcy, hto no3sonqeT nocneAHeMy 

BbWIBMTb CTaTMCTMHeCKMe OC06eHHOCTM 

npoueAyp LUM<t)poBaHMFi n Mcno/ib30BaTb mx npw 
npOBGAeHMM KpnrtToaHann3a 

B ocHOBy M3o6peTeHM« no/ioaceHa 3aAasa 
paapa6oTaTb cnoco6 uiMC&poBaHMfl 6/iokob 

UM0pOBblX AaHHblX, B KOTOpOM UJM^pOBaHMe 

bxoahwx AaHHbix ocymecTBJinnocb 6w tbkmm 

06pa30M, HT06bl BbJHB/IGHUa CTaTMCTVIMeCKMX 

oco6eHHOCTeM a/iropMTMa uiM(t>pOBaHMfl 
KpunToaHanMTMKOM 6bwo 6bt cymecroeHHo 
3aTpyAHeH0, 6naroaapa neMy noBwiuaeTcw 

CTOMKOCTb K M3BeCTHblM M6T0A3M 

KpnnToaHann3a, BKntonafl AW(|>(t>epeHuji2WbHbii* 
m nnHeiiHbiM KpM nToaH an M3 

nocTaB/ieHHan 3aAana AOCTuraeTCfl TeM, hto 
b cnocoSe KpnnTorpact>MHecKoro 

npeo6pa30BaHM» 6/iokob uwqbpOBbix AaHHbix, 
3aiaiK>Ha!omeMCfl b 4>opMMpoBaHMw ceicpeTHoro 
K/iiOHa, pa36neHMM 6/iOKa AaHHbix Ha N>2 
noA^/iOKOB m noonepeAHOM npeo6pa30BaHnn 
noA&noKOB nyTeM ocymecTBneHMfl naA 
noA6/ioKOM no KpaftHeft Mepe qahom onepaunn 
npeo6pa30BaHMR ( KOTopan 3aBMCMT ot SHaneHun 
axoAMoro 6/ioxa, hobum comacHo M3o6peTeHnio 
ABJiaeTCfl to, hto nociie (^opMnpOBaHUfl 
ceKpeTHoro K/Hona Aono/iHMTenbHO qbopMMpyioT 

a/irOpMTM Wkl(J)pOBaHHfl B 3aBMCHMOCTM OT 

ceKpeTHoro loiioHa 

B/iaroAapn TaKOMy peiueHmo 
oSecneHMsaeTCfl cymecTBeHHoe ycno>KHeHMe 
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BbJflBJieHMfl CTaTMCTMHeCKHX OC06eHHOCTeCi 

a/iropMTMa LUH^pOBaHmi Kpvi nToaHa/iMTvi kom , 
6/iaroAapfl neMy o6ecneHMsaeTCR noBbnueHiie 
ctomkoctm KpMnTorpaqbMHecKoro 
npeo6pa30BaHnq k n3BecTHHM MeTOAaM 
KpnnToaHann3a 

HOBUM HBiineTCfl raioKe to, hto qamh H3 
noA6/i0KOB Aono/iHvrre/ibHo npeo6pa3yK)T nyTeM 
ocymecTB/ieHun HaA hum onepaunn 

n 0ACT3H0B KM , KOTOpaP 33BMCHT OT BXOAHOrO 

6noKa m Buno/iHfleTCfl no ceKpeixbiM Ta6nnuaM 
noACTaHOBOK B^aroAapq TaxoMy peiueHMto 
o6ecneHMBaeTcn Aono/iHMTejibHoe noBuiueHMe 

KpMnTOCTOMKOCTM K H3BeCTHbJM MeTOAaM 

KpunToaHajiM3a 

Hobwm «BJiqeTCfl Taioice to, hto ajiropMTM 
ujn(t)pOBaHMfl <t>opMMpyioT nyTeM 
cfcopMHpoBaHMfi onepauuM, KOTopue 3aBMc$rr ot 
BxoAHoro 6noica 

BnaroAapn TaxoMy peuieHwo, 
o6ecneHMBaeTcn Aono/iHHTe/ibHoe noBHiueHMe 

KpMnTOCTOM KOCTM K M3BeCTHblM MeTOAaM 

KpnnToaHajiM3a HoBbiM qB/iqeTCfl TaioKe to, hto 
ajiropMTM umttjpoBaHMfl qbopMMpyiOT nyieM 
0opMMpOBaHMfl onepauuft noAcraHOBOK, 
KOTopue 3asncqT ot BxoAHoro 6/ioxa m 
ocyiAecTB/inioTCfl no cexpeTHbiM Ta6nnuaM 

nOACTaHOBOK 

B/iaroAapq TaxoMy peiueHMio, 
oSecneHMBaeTCfl AononHMTenbHoe noBwiueHMe 

KpMnTOCTOMKOCTM K M3BeCTHblM MeTOAaM 

KpMrrroaHajiM3a 

HMxe cyiuHocTb 3aflB/ineMoro M3o6peTeHM« 
6onee noApo6HO pa3-bflCH«eTC« npMMepaMM ero 
ocyiAecTBJieHMH co ccbt^xaMM Ha npmiaraeMbie 
nepTe)KM 

Ha qbMr 1 npeACTaB/ieHa o6o6meHHaq 
cxeMa KpMnTorpa4>MHecKoro ycTpoficTBa Ann 

UJM<t)pOBaHMn 6/IOKOB UM<t)pOBblX AaHHbtX B 

cooTBeTCTBMM c 3a«BJifleMWM cnoco6oM 

Ha <t)nr 2 npeACTaB/ieHa cxeMa 
ujM4)poBaHMR, cooTBeTCTByioman npMMepy 1 

Ha <t>nr 3 npeACTaB/ieHa cxeMa 
ujM<t>pOBaHMq, cooTBeTCTByiomafl npMMepy 3 

3anBiineMbiM cnoco6 MOxeT 6bJTb 
peajiM30BaH c noMombio 3BM miM 
BbtHMCnMTe/lbHOrO ycTpoMCTsa, 
npeACTaBJieHHoro Sjiox-cxeMoft Ha (t>nr 1 . rAe 

6noK 1 - ycTpoiicTBO BBOAa ceKpeTHoro 
loiioHa, 

6jiok 2 - 6nox cJ)opMnpoBaHnq MaiuMHHOro 
KOAa nporpaMMbi ujMQbpOBaHMn (6/iok HacTpOMKM 
ujMct>pa), 

6jiok 3 - 6jiok naMHTM ycTpoMCTsa 

UJM(t)pOBaHM(1, 

6nox 4 - onepauMOHHbiii 6jiok ycTpoPicTBa 

UJMQbpOBaHMR, CQAepXatAMM TpM, HeTblpe MJ1M 

6onee perucrpa, 

6/10K 5 - yCTpOMCTBO llJMC&pOBaHMfl, 

6 - iiiMHa nepeAanM MH<t>opMauMOHHbix 
CMrxa/iOB ceKpeTHoro Kjnona nonb30BaTenq, 

7 - LUMHa nepeAanM MHct>opMauMOHHbix 
CMmanoB c0opMMpOBaHHoro MauJMHHoro koab 
nporpaMMbi LiiM^poBaHMn m cexpeTHoro loitona, 

8 - LUMHa nepeAann MH$opMauMOHHbix 
cMFHa/toB noAKHKwefl m nepeAanM 
MH0opMauMOHHbix cm man OB BXOAHWX AaHHblX M 
MH<j>opMauMOHHbix CMmanoB npeo6pa3yeMbix 
noA^noKOB, 

9 • LUMHa aApecaLLMM, 

10 - LUMHa nepeAanM MHQbopMauMOHHbix 
CMma/iOB MauJMHHoro koa3 nporpaMMbi 
umqbposaHMa, 

1 1 - LUMH3 BBOAa bxoahwx AaHHblX, 

12 - LUMH3 BblBOAa LUM$pTeKCTa 
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OopMMpoBaHne ceicpeTHoro K/itona mohcho 
ocymecTBMTb HenocpeACTeeHHO bbqah era b 
ujn0pyiomyK) cudeMy mam onepaTMBHyio 
naMRTb 3BM, HanpMMep, co cbeMHoro hocmtgjir 

MH(t)OpMaUMM BXOJOHOM 6/lOK ABHHbJX 

pa36nBatoT Ha noAOAOKM, Hanpmviep, nyreM 
npeACTaaneHMA noASnoKa b Bvme coBOKyrmocTM 
notA^JiOKOB, 3anncaHHbix no <J)HKCnpoBaHHbiM 
aApecaM b 6/iok naMRTM 3. 

HcnonbsyR 6jiok 1 bboaht ceKpeTHUM kaioh, 
MH(t)OpMau,viOHHbiM CMman KOToporo no uime 6 
noAaiOT Ha bxoa 6noKa 2. B 6/iOKe 2 (J>opMMpyiOT 
b 33bmcmmoctm ot cexpeTHoro KnioMa a/iropnTM 
ujHc^pOBaHnq, t. e reHepupyioT MaujMHHbiM koa 
nporpaMMu ujM<J>pOBaHMR noA ynpaBneHMeM 
ceKpeTHoro Kmosa. flpn stom (fcopMMpOBaHMe 
anropMTMa wMcfepOBaHMR ocymecTBnRKrr tbkmm 
o6pa30M, MTo6bi /ito6an MOAMtJjMKaunq 
ajiropMTMa ujm(J>pob3hmr BKmonana pa36neHne 

6/lOKa UM0pOBblX A3HHUX HS nOA&/10KM II 

nooMepeAHoe npeo6pa30BaHne noAonOKOB 
nyreM ocymecTBneHMR AeyxMecTHOM onepaunn 

H3A HOASjIOKOM M nOAKHtOMOM M BbinOnHeHMfl 

H3A noA6noKOM onepauMM npeo6pa30BaHMR, 
aaBMcniMew ot BxoAHOro 6A0ica. 

MH0opMaunoHHbiM cnmaji ceKpeTHoro 
wiiOHa m MH^opMauMOHHbiCi cumaA MaiUMHHOrO 
koa3 nporpaMMb) ujw(J>pOBaHMR no iunHe 7 
nepeflaiOT b 6jiok naMRTM 3. nocne 3Toro 

yCTpOMCTBO UJM({)pOBaHMR 5 COAepttMT B naMRTM 
CeKpeTHblM KJ1IOM M M3LlJMHHbtM KOA, 

pea^nsyioiuuM a()0pMMp0B3HHbiCt anropMTM 

UJM<t>pOBaHMR, H TOTOBO K BbinOnHeHMtO 

onepauMM tuMcfepOBaHMR AaHHoe 

MHM14HaJlH3Hp0BaHH0e COCTORHMe ycTpoiiCTBa 

coxpaHfleTCR b TeseHne Bcero BpeMeHM paGoTbi 
3aKOHHoro no/ib30BaTe/ia. Bxoahom 6/iok 

UH(J)pOBbjX AaHHblX B BO A^T no lilMHe 11 B 

onepauMOHHbiM 6aok 4 n 33TeM no lumhb 8 b 

6nOK naMRTM 3 EflOK UJM<t>pTeKCTa CHMTU B36TCR 
C WMHbl 12 flO U1MH6 10 B OHepaUMOHHblM 6/IOK 
4 nepeABIOT KOAbl MaiJJUHHblX KOMaHA An* 

Bbino^HeHMR npoueAyp npeo6pa30BaHMR. npn 
3aBepuueHnn paSoT no um<|>pOBaHMio ashhux 
no/ib30BaTenb BbnouonaeT ycTpoiiCTBO 

UJMtfcpOBaHMR, MTO npMBOAMT K aBTOMaTMHeCKOMy 

cmpaHwo ceKpe-moro Kniona m 
c<t>opMMpOBaHHoro MaujHHHoro KOAa ajiropMTMa 
ujH^posaHMFi u3 06/iacTM naMRTM 6/iOKa 2 m 
6/iOKa 3, nocKO/ibKy OTmnosaeTCR 
anetaponwraHne Bcex ojiokob ycrpoPiCTBa 

WM(|)pOBaHMR. TaKMM o6pa30M, KOHKpeTHaH 

MOAM<J)MKauMR anropMTMa ujMcfcpOBaHMR Tatcxe 

K3K M CeKpeTHblti KJ1I0H RB/1RKDTCR H6 AOCTyHH bl M M 

Adr noTeHuwanbHoro KpMnroaHaftMTMKa, 

KOTOpOMy M3BeCTeH TOJlbKO aJlTOpMTM 

4>opMnpoBaHMfl anropMTMa iun4)pOBaHHfl 3to 

CymeCTBeHHO 33TpyAHR6T BURB/ieHkie 
CT3TMCTMHeCKMX OCO6eHH0CTeM KOHKpeTHOM 

MOAM<t>MKauktM aiiropnTMa ain^pOBaHnfl npw 

HMC/16 n0TeHUM3JlbH0 pe3J1M3yeMblX 

MOAnc^MKamiM, paBHOM nnn 6o^ee 10 20 , 

33RBAR6Mbi^ CnOC06 LUM(})pOBaHMR 

o6ecneHMBaeT BucoKyio CTOMKocTb ko BceM 
MSsecTHbtM MeT0A3M KpnnToaHanvi3a. 

OopMviposaHHe ajiropMTMa ujM^pOBaHMR 
MOxeT 6bm> ocymecTB/ieHO c/ieAytoiuMM 
o6p330M. npeABapnTe/ibHO Ha ocHOBe OAHoro 

M3 H3BeCTHblX 3Jir0pMTMMM6CKMX R3bJK0B 

C0CT3B/1 r eTCR nporpaMMa-uja6/iOH B 
nporpaMMe-wa6/ioHe 3ape3epBvipOB3Hbi MecTa, 
b KOTOpbix npeAycMOTpeHa B03MO)KHOCTb aanncn 
/ik>6om M3 HexoTOporo Ha6opa onepaunti 
(HanpMMep, AByxMecTHbix onepaunii unw 
onepauviM unx/ivmecKoro CABura, 3aBMCRiuMx ot 
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BxoAHOro 6/iOKa). Bee 3ape3ep8HpoBaHHbie 
MecTa (noA onepaunn npeo6pa30BaHMR) 
HyMepyiOT. noosepeAHO, HanviHaR c nepsoro, 

A/1R BCeX 3ap63epBMpOB3HHUX MeCT Ct)0pMMpyiOT 

onepauMM npeo6pa30BaHnn e 3aBncnMOCTM ot 

3H3HeHMR 3JieMeHTa AOnOAHklTe/lbHOPl 

nceBAOC^ynaiiHOM noc/ieAOBaTe/ibHocTvi, 
UMeiOLuero HOMep, coBnaAafOLUuM c komgdom 
HacTpanBaeMOii onepauMw renepauMK) 
nceBAOc/iyHafiHOM n oc^neAO BaTenbH o crrn 
Heo6xoAMMOM AnnHbj ocyiAecTB/iRiOT b 
aaBMCMMOCTM ot ceicpeTHoro tuitona, HanpMMep, 
Mcno/ib3yR reHep3T0pbi nceBAOC/ryHaMHwx 
MMce/i, onMcaHHue b pa6oTe Spmenn 3<P., 
OonuDiCKO 3.M. KpnnToaHajin3: 063op HOBewiuvix 
peayjibTaTOB// TV1M3P. 1988 T 76. N. 5. C. 
87-89 

OopMnpoBaHne onepaunvi npeo6pa30BaHMR 
ocyiuecTB/iRKDT, HanpMMep, c/ieAyiomMM 
o6pa30M /J,ByxMecTHaR onepauMR, 
Mcno^bsyeMdR a^h Ha/ioxeHMR noAKnioMa Ha 
noA6/ioK, ycTBHaB/i MBaeTCR kzk onepauMR 
nopa3pRAHoro cyMMMpOBaHMR no MOAynto 
ABa ( ©), ec/tki d; mod 3 = 0, r^e dj - 3HaMeHne 
cooTBeTCTByjomero aneweHTa AonoAHwrenbHOM 
nceBA0CJiyM3MH0M noc/ieAOBaTenbHOCTM, ^m6o 
k3k onepauMR cyM m mpob3hmr no MOAy/i>o 
2 32 (+), ecjiM d' mod 3 = 1,/im6o icax onepauMR 
BbiHMTaHMR no MOAy/iK) 2 s2 (-), ecnM d, mod 3 = 
2. B npoueAypax HadpoPiKM anropMTMa 
AeujM(|)pOBaHMR HacTpaMBaioTCR onepauMM, 

RBARIOLUMeCR 06p3THblMM no OTHOUJeHMK) K 

cooTBeTCTBy io m,MM onepauMRM, HacTpaMBaeMbtM 
b anropHTMe uj M()>po b3h m r . A^^ 3Toro GnHapHan 
onepauMR b aiiropMTMe AetunffipoBaHMR 
ycTBHaB/iMBaeTCR Kax onepauMR nopa3pRAHoro 
cyMMMpOBaHMR no MOAynio ABa ( 0), ecnM 
d j mod 3 = 0, /im6o ksk onepauMR BbiHMTaHMR no 
MOAy/iio 2 s2 (-), ec/w dj mod 3=1, /w6o k3k 
onepauMR cyMMMpOBaHMR no MOAy/iK) 2 32 (+), 
ecjiM dj mod 3 = 2 

nocne Toro, icaic b nporpaMMe LUMCj)pOBaHMR , 
3anncaHHOH Ha anropMTMMsecKOM R3biKe 
(HanpMMep, hs R3biKe CH wm flacicanb), 
ycTSHOBneHbi onepauMM npeo6pa30BaHMR bo 
Bcex 3ape3epBMpOBaHHbix MecTax, 
reHepMpyeTCR MaujMHHbiM koa, 

COOTBeTCTByiOUIMM nporpaMMe UIMC^pOBaHMR, 

McnoAb3yR, HanpMMep, TpSHcnRTOp, 
npeodpasyKDiMMM nporpaMwy, cocraBAeHHyio Ha 
anropMTMMsecKOM R3biKe, b 
nocneAOBaTenbHOCTb MaiuMHHbtx KOMana. 

CeKpeTHbIM KHIOH M M3UJMHHblM KOA npOrpaMMbl 

LUMcj)pOBaHMR 3anMCbiBaiOTCR b onepaTMBHyjo 
naMRTb 3BM (mam cneunajiM3MpOBaHHoro 
tiiM()>pytoiuero yCTpOMCTBa) m h3xoa^tcr t3m 
nocTORHHO b TeneHMe Bcero BpeMeHM pa6oTbi 

AaHHOfO nonb30B3TeAR t BbinO/IHRR 

npeo6pa30BaHne nocrrynaiomMx a^h 
ain(J)pOBaHMq 6/iokob ashhux. CnoxHOCTb 
npoueAyp 0opmmpob3hmr K/nosa ujM())pOBaHMR 
m reHepMpOBaHMR MaiunHHoro xona nporpaMMb) 

LUM(t)pOB3HMR He B/lMfleT Ha CKOpOCTb 

ujM<|>pOBaHMR, nocKonbicy 3Ty npoueAypy 

BbinonHRIOT OAHOKpaTHO npM MAeHTM<t)MKaUMM 

notnb30B3TeAR no naponio b momcht BKnioneHMR 
iun4)pyK)mero ycTpoftCTBa mam BbooBa 
uiM(t>pyiOLAeM nporpaMMbi 

AonojiHme/ibHoe noBuoieHMe 

KpM rrrOCTOMKOCTM UJM(J)p08aHMR AOCTMraeTCR npM 

33A3hmm 4)OpMMpOBaHMR onepauMM 

npeo6pa30B3HMR t 33BMCRIAMX ot 

npeo6p33yeMbix AaHHbtx HanpuMep, AnR 

n03MUMM, 33pe3epBMp0B3HH0M nOA 
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OAHOMecTHyio onepaunio hsa qahmm m3 
npeo6pa3yeMt>ix 32-6mtobhx noAOJiOKOB - 
noA6/iOKOM B, t moxho 3aAaTb cpopMHpoeaHne 
oahom M3 c/ieAyioiuMx onepauviM: (1) 
onepauMM ( 1 S V ) noACTaHOBKM HaA 8 M/ia/uuHMM 
abommhnmm pa3pnAaMM (c HOMepaMM ot 1 -To no 
8-m) noA6/iOKa, Bbino/iHneMan no V-tom TaSn^ue 
nOACTaHOBKM, HOMep KOTOpOW BuSnpaeTCfl B 
3aBncnMOCTvi ot noAonoica Bj, rAB i*J, (2) 
aHanorviMHOM onepauMM ( 2 Sy) poactbhobkm HaA 
ABOUHHblMM paspRAaMM noAfwioica c HOMepaMM 
ot 9-ro ao 16-ro BK/iiOMMTanbHO, (3) onepauMM 
( <<<- |V) unK/innecKoro CABura s/ieso 
coabpxmmoto noAonoKa Ha hmcjio 6ht, paBHoe V 
= B, mod 32, rqe t*j, (4) onepaunn («<2V) 
UnioiMMecKoro CABMra BJieso coA6p*MMoro 
MnaAUJux 1 6 abomhhux pa3pRAOB noA6noica Ha 
mmc/10 6mt, paBHoe V = Bj mod 16, rp,e i*J, (5) 
onepauiiM («<3V) uMK/iMsecKoro CABura BJieBO 
coAepxMMoro M/iaAwux 8 abommhhx pa3pnAOB 
noA6/ioica Ha mmcjio 6mt, paBHoe 3HaseHMio V = 
B, mod 8, rAB (6) onepauMM («<4V) 
UMIUIVIHBCKOrO CABMra BJieBO coAep)KHMoro 
ABOMHHblX pa3pHAOB C 9- TO nO 16-M 

BioitoHwre/ibHO noASnoKa Ha hmcjio 6mt, paBHoe 
3naHeHMK> V = Bj mod 8, tab fetj 

nocne Toro, kbk b nporpaMMe LLiM(|)poBaHMn, 
3anncaHHOM Ha a/iropMTMMHecKOM n3biKe 
(HanpMMep, Ha *3biKe CH mjim nacKanb), 
ycTaHOB^eHbi onepauMM npeo6pa30BaHMR bo 
bcbx 3ape3epBnpOBaHHbix MecTax, 
reHepMpyeTcn MaiUMHHbiM koa, 

COOTBBTCTByiOLUlIM npOrpaMMe UJMCt>p0BaHt1fl, 

Mcnonb3yn, HanpMMep, TpaHcnnTop, 
npeo6pa3yK)mnM nporpaMMy, cocTaaneHHyto Ha 
anropMTMiisecKOM H3biKe, b 
noc^eAOBaTenbHOCTb MauiMHHbix kom3ha* 

CBKpeTHblfl KJIKDH M MailJUHHblkt KOA nporpaMMbi 

um(j>pOBaHMn sanncbiBaiOTCR b onepaTMBHyio 
naMRTb 3BM (mjim cneuna^M3upOBaHHoro 
ujM<J>pyiomero ycTpoiiCTBa) m HaxoAflTcn tbm 
nocroRHHO b TeseHMe Bcero BpeMeHM pafioTbi 
AaHHoro no/ib30BaT6/ifl, Bbino/iHnn 
npeo6pa30BaHne nocTynaiomMx Ann 

WH^pOBaHMH 6/10K0B UMCt)pOBbJX AaHHblX 

C/10)KHOCTb npOUBAyp (|)OpMMpOBaHMn KJIKDHa 

ujMtfipOBaHUR m reHepiipOBaHMH MamnHHoro 
koa3 nporpaMMbi ujM<j>pOBaHMn He B/mneT Ha 

CKOpOCTb lUM(J)pOBaHMH ( nOCKOflbKy 3Ty 

npoueAypy Bbmo/mnioT oAHOKpaTHO npM 
MAGHTM0MKaunn nojib30BaTe/m no era 

CBKpBTHOMy KJllOMy B MOMeHT BKJlKWeHMfl 

wwct>pyK)mero ycTpotfcrBa min Bbt30Ba 
ujM<j)pyiom6M nporpaMMbi. Ha coBpeweHHbix 
3BM npoueAypa 4>opMMpOBaHwn ajiropMTMa 

UJM0pOBaH11R B BMAB MaiUUHHOrO KOA3 

nporpaMMbi WMcfepOBaHMn xienco MO*eT 6bJTb 
aBTOMarn3npoBaHa m peann30BaHa b bi^ab 
nporpaMMbi MHHunanM3auMM MOAynn 
un(J)pOBaHMR. BpeMn, Heo6xoAMMoe Ann 
Buno/iHeHMfl nporpaMMbi MHni4nann3aunn, 
cocTaBiifleT ot 0,03 ao 0,5 ceicyHA b 
3aBMCMMOCTM ot KOHKpeTHoro BapMaHTa 
peann3aunM 3ana/ineMoro cnoco6a, hto 
npMeM/ieMO Ann 6o/ibiunHCTBa npMMeHeHMvi 
cucreM 3amnTbi nncJx)pMaunn 

AHanorMHHbiM cnoco6oM 0opMkipyeTcn 
nporpaMMa AeujM4)pOBaHMfl 6/iokob 
KpurrrorpaMMbi LUn^pyiOLuafl m 
cooTBeTCTByioiuan ew Aeujii<t>pyiOLMafl 
nporpaMMbi cocTaB^niOT eAMHyio 
KpnnTorpa0MMecKy»o nporpaMMy. MawnHHbiw 
koa KpnnTorpa0HMecKOM nporpaMMbi 
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sanwcbJBaeTCfl b onepaTMBHyK) naMRTb 3BM, 
KOTopan noA ero ynpaaneHiieM Buno/iHReT 

npOUBAypbl LUMtt>pOBaHMfl n AeuiMct)poBaHMq 
6/IOKOB. npOUeAypW UiM$pOBaHMfl M K/1)OH 
LUMCppOBaHUfl C((>OpMMpOBaHbl B 3aBMCMM0CTW OT 

ceKpeTHoro Kniosa (napo/in) no^b30BaTe/iB, t 
e. nanntOTCR yHMKa/ibHUMM, wto oSecnennBaeT 
Bucoicyio oioxHOCTb KpwTroaHajin3a 

BaxHWM TunOM onepauMM, 3aBHcnLAiix ot 
npeo6pa3yeMbix AaHHbix, na^RiOTCfl onepaunw 
noApraHOBOK, ocymecTB/ineMbie no Ta6/inuaM, 

Bbl6npaeMUM B 3aBMCMM0CTM OT BXOAHOrO 

6^0Ka. riycTb onepaunn noACTaHOBioi 

BbinO/IHRIOTCn HaA nOAOflOKaMM UHCj)pOBblX 

AaHHbix AnnHOvi k 6ht, tab k • ue/ioe Mucno. 
TorAa Ann 3aAaHMA onepauMii noACTaHOBKM, 
npeo6pa3ytomeM k-6nTOBwf1 bxoahom noA6noK b 
k-6nTOBbi^ BbixoAHOii nOA6/iOK, Tpe6yeTcn 
ncno/ib30BaHne Ta6n^ubi t coAep^aiueM abb 

CTpOKM HMCe/1. 

O 1 2 ... N-1 

aQBi 82...^, 

rAB 
N = 2 k 

B ashhom Ta6nnue b HuxHeii CTpoKe 
npucyTCTByiOT bob B03MO)KHbie 3HaseHnq 
k-6mrj3oro 6noKa dobho no OAHOMy paay, ho b 

np0H3B0/lbH0M nOpRAKB OsepeAHOCTb 

pacno^oxeHnq ween b HHXHevi CTpoKe 

OnpeAB/IHBT KOHKpeTHbIM B3pM3HT Ta6/1MUbl 

noACTaHOBKM, a c/ieAOBaie^bHO, h KOHxpeTHUM 
BapMdHT onepaunn n o act3hob km , BbinoAHneMOM 
c ncno^b30BaHneM 3tom Ta6^nuw. Bwno/iHeHne 
onepaunn noACTaHOBKM ocyiuecTB/ineTcn 
c/ieAyiomuM o6pa30M. Bbi6npaeTCfl b eepxHew 

CTpOKe SMCAO, KOTOpOe paBHO 3HaH6HHK) 

BxoAHoro 6/iOKa. HaxoARLueecn noA 3thm 
hmc/iom SHaneHne b HwxHevi CTpoxe 6epeTcn b 
KanecTBe BbixoAHoro 6/iOKa TaKUM o6pa30M, 
TaS/inuy noACTaHOBKM moxho pa3MecrviTb b 
onepaTMBHOii naMRTM 3BM xax 
nocneAOBaTenbHyio sanncb k-6MTOBbJx 
KOMnbtOTepHbix c^ob, pa3MeiueHHbix b nsefiKax c 
aApecaMM Wo. Wi, W2, . ., W^. B stom cnysae 
3HaneHne BxoAHoro 6/iOKa b c/iyxMT Ann 
BbiHMcneHMq aApBca Wo + b c/iOBa, KOTopoe 
6epeTcn b KasecTBe BwxoAHoro 6noica. 3tot 
cnocoS npeACTaaneHMn Ta6/inubi noACTaHOBKM 
Tpe6yeT Mcnonb30BaHMn o6beMa naMfim, 
paBHoro kN 6mt. 

BbiSepeM KO/ivmecTBO Ta6n^u noACTaHOBKM, 
paBHoe 2 L (o6beM TpeSyeMoPi naMRix coct3bmt 
npn 3tom 2 L kN 6mt), m pa3MecrviM Ta6nMUbi 
noACTaHOBOK HenpepuBHO Apyr 3a ApyroM B 
KasecTBe aApBca TaOnMUbi c HOMepOM V 
B03bMeM 3HaseHMe aApBca Wo ee nepBoro 
k-6nTOBoro cnoBa. riycTb aApec TaOnuubJ c 
HOMepOM 0 ecrb s. B stom cnynae aApec 

TaS/lMUbl nOACTaHOBKM C npOM3B0nbHblM 

HOMepOM V paBeH s + VN. Ec/im 3aAaHbi HOMep 
TeKymevi Ta6/iMUbi noACTaHOBKM V m TeKymMM 
bxoahom noA6nox Ann Bbino/iHeHun onepauMM 
noACTaHOBKM, to OHa BbinonHneTcn 3aMeH0M 
TeicyiMero BxoAHoro 6noica Ha k-6MTOBoe c^iobo, 
pacncwioxeHHoe no aApecy s + VN + b, tab b - 
3HaseHne noA6noKa, HaA kotopum Bbino/iHneTcn 
Texyiuan onepauMn noACTaHOBKM. Mcno^bayn 
3to cooTHOtueHMe Jierxo 3aAaTb Bu6op Ta6nnubi 

nOACTaHOBKM C HOMepOM V M BbinOnHMTb 

noACTaHOBKy HaA noA6/iOKOM co 3HaseHMeM b B 
paccMOTpeHHOM cnysae 3aAaHMe 33bmcmmoctm 
Ta6nMu noAcraHOBOK ot 3HaMeHMH abommhopo 
Beiaopa m Bbino/iHeHne onepauHM noACTaHOBKM 
ocyuiBCTBnniOTcn MMKponpoueccopOM oneHb 
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6bicTpo npn BbiSope cooTBeTCTBy to mux 
3HaseHuti napaMeTpOB ink. HanpMMep npn L - 
5 m k = 8 npn yKa3aHHbix napaMeTpax aar 
pa3MeiueHnn Ta6/inu noACTawoBKM TpeoyeTCR 8 
K6aiVr onepamBHOii naMRTM, hto RB/iaeTCR 
npkteMneMbiM, nocKO/ibKy coBpeMeHHbie 3BM 
o6/ia/iaiOT o6beMOM onepaTMBHOfi naMRTw Ha 
MHorwe nop^AKM oojibwe stow Bemmmu (ot 1 
AO 64 M6awT h 6o/iee) 

Bo3MO)KHocTb TexHMMectcoM pea/waauMM 
saRBJiaeMoro cnoco6a noacHaeTCR 
c/ieAyioiunMM KOHKpeTHbiMM npMMepaww ero 
ocymecTB/ieHnq 

npMMep 1 

flycTb L=5 m k=8, Te ashw 32 TaQ/wMbi, 
3aAaK>mne onepaunn noAcraHOBio/i hsa 

8-6MTOBblMM nOA^/IOKaMkl ABHHblX Ta6/inubi 

6yAeM npeAnonaraTb msbscthumm, t e /imuo, 
nuTaiomeecR npOBecTvi KpnnToaHajiM3, 3HaeT 
3TM TaSflMUbl C<t>opMMpyeM ceKpeTHbiw khioh, 
npeAcraa/ieHHUM b bhap coBOKynHOcrrvj H3 8R 
16-6nTOBbix noAtcnioMen 

qio. ^11 * • Qi7 (nepBan crpoica noAK/iKweii) 
H20- ^21 . • 427 (BTOpan CTpoKa noAK/itoneii) 

QrO. Pn. , <V7 ((r-TaR crpomca noAwiKweii) 

4RO,qRi, , 4R7 (R-Taji crrpOKa nOAxniOMeM), 
rAe R - hmc/10 payHAOB ujn^pOBaHun 
Ha r-TOM payHAe wnc|)pOBaHMR 
ncno/ib3yeTcn r-TaR CTpoxa noAK/iiOHeii 

0603HSWMM ncno/ib3yeMbte Ta6/mubi 
noAcraHOBKM cjieAyiomuM o6pa30M TO, Ti, T 2( 
,T31, a onepaumo noACTaHOBKM, 3aAaBaeMyio 
Ta6/iwueii T v , icax S v , rAe v = 0 ( 1, 2, 
31 Ta6/inubi noACTaHOBOK To, T 1( T 2 
,T 15 Moryr 6biTb Bbi6paHbi npOM3BO/ibHbiMii, a 
Ta6/inuw Ti6. T 17( , T'31 6epyTCR TaKHMM, 
MTo6bi onepauMM noAcraHOBOK S v m S31.V 6bi/in 
B3anMH0 oSpaTHbJMM floc/ieAHee yc/ioene 
Bbino/iHneTcn, ecnn napw Ta6/inu T is w T15, 
T 17 m T14 Tia m Ti3, , T31 m To 6yAyT 3aAaBaTb 
B33HMH0 o6paTHbie onepauuu noAcraHOBKM Ajir 
HaSopa npon3BOJibHbix Ta6/wu noACTaHOBKn 
To. Ti. T 2 . .T5 Jierxo cocTaBMTb Ta6nnu&, 
cooTBeTCTByiomMe o6p3THbiM onepauMRM 
noAcraHOBKM HanpuMep, Ann onepauMM 
noACTaHOBKM, 3aAaBaeM0M c/ieAyiomeM 
Ta6/inueM 
0 1 2 255 
a 0 ai a255. 

a o6pa™afl noACTaHOBica 3aAaeTCR 

0 1 2 255 
2o Zi Z 2 2255. 

rAe dpoKa (Zq, Z 1p Z2, , Z255) nonynaeTCR 
K3K BepxHHfi CTpOKa nocne ynopnAOseHMA 
CTon6uOB npeflbiflymeM Ta6/inubi b nopaAKe 

B03paCTaHMfl HHCe/1 B HHXHeM CTpOKe 

Ha cjwr 2 noKaaana cxeMa r-ro payHAa 
ujucppoBaHMfl, rfle cnnouiHan Bepnuca/ibHaa 
jMHMfl cooTBeTCTByeT nepeAa4e 16-6nTOBbix 
nqAoViOKOB AaHHux, nyHKrupnafl jwhmr 
cooTBeTCTByeT nepeAawe abohhhoto seiaopa V, 
(fjopMMpyeMoro b aaBucuMOCTn ot 3HaneHMR 
OAHOro M3 npeo6pa3yeMbix noAG/ioxoB, 

r0pM30HTaJlbH3R Cn/lOWHaR J1MHMR 

cooTBeTCTByeT nepeAase 1 6-6nTOBoro 
pQAKniOMa flByxMecrHaa onepamw, 
Buno^H«eMan hsa noASnoKOM n noAltnKWOM, 
o6o3HaneHa 6/iokom, b kotopom yKa3aH 3H3k 
("•") AByxMecTHOii onepauMM, 0opMMpyeMoii Ha 
3Tane 0>opMvipOBaHkin anropuTMa ujn^pOBaHviq 
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m ycTaHaB/iMBaeMOM kbk oAHa via c/ieAyiomiix 
onepauMfi "+ M mm Hmxhmm MHAexc y 
3Haxa o6o3HaMaeT hombp AByxMecTHOw 
onepauMvt 

OAHOMecman onepauwq, Bbino/iH$teMan HaA 
noA&iOKOM m <|x)pMnpyeMaq na STane 
4)opMnpoBaHM?i ajiropMTMa LUn^pOBaHun, 
o6o3HaseHa 6/iokom b kotopom yKaaaH 3H3k 
" «<C" flaHHan OAHOMecmafl onepaunn 
ycTaHaB^nBaeTcn icax onepauna unKjinnecKoro 
CABura B/ieBO Ha mmcjio 6ht paBHoe 3HaseHnio 
napaMeTpa C Bcero bosmoxhw 16 pa3Hbix 
Tunos onepauufi unioiMHecKoro CABura B/ieBO, 
KOTOpue onpeAe^Rmcfl 3HaneHMeM napaMeTpa 
C = 0 1, 2, ,16 Hmhchmm MHAeKc y 
napaMeTpa C o6o3HasaeT HOMep OAHOMecTHoft 
onepaunn Bee 3ape3epBMpOBaHHbje onepaunn 

1 . 2 . • 8R-1 . 8R H <«0 1 , 
" «<C2 n , . M <«C 8 R-r. "<«C8R M 4)OpMMpyK)TCR 
b 3aBncnMOCTM ot ceKpeTHoro lOllOHa M OT 
nopRAKOBoro HOMepa A^R Mnc/ia payHAOB 
ujHcfipOBaHMfl, paBHoro R = 4, noTeHunajibHO 
pea^vi3yeMbi 3 8R 16 8R = 48 8R - 4S 32 (okojio 
10 53 ) pa3JiM4Hbix MOAM4)MKauMM ajiropMTMa 

UJM(|)pOBaH)1R Bbl60p KOHKpeTHOM MOAM^KaUMM 

onpeAe/iReTCR buoopom ceKpeTHoro ic/iiona 
AaHHoe hmc^o MOAH(J)MKaunM AOcraTOMHO 
Be/iwco, hto onpeAenReT yHHKa/ibHOCTb 
ajiropMTMa um<t)pOBaHMfl AnR KEOKAoro 
nojib30BaTejiR (min napu no/ibaoBaTe/iew, 
MCnOilbSyiOlUMX OAHHaKOBWH ceKpeTHNM kjiioh 
A^n nepeAasM coo6iueHMM no jimhmrm cbr3m) 

B/iok S o6o3HaHaeT onepauno noACTaHOBKM, 
Bbino^HReMyfo b aaBucuMOCTn ot bxoahoi~o 
6/iOKa no Ta6/inue c HOMepOM V qro. ^ri. . 
q r 7 - noAKniOHM, ncno/ib3yeMbie Ha r-OM payHAe 
CTpenKM H3 /iuhmrx o6o3HaH3K>T HanpaB/ieHne 
nepeAann cvtmanoB 

FlpMMep 1 COOTBeTCTByeT UJHCt)pOBaHMK) 
6/lOKOB UH0pOBblX ABHHblX pa3MepOM 128 6mt 
LLIn^pOBaHne Bbtno/iHRioT crteAyiotMMM nyTeM 
BxoAHOft 6V10K pa36nBaK)T Ha 8 noAoViOKOB b 0 , 
b 1. , b7 pa3Mep0M 16 6mt KawbiM nocjie 
3Toro Ha nepBOM payHAe (r=1) HaA 
noAG/iOKOM b 0 ocyinecTBHRtOT oAHOMecTHyio 
onepaumo ,, <«Ci" t aaTeM HaA noAS/iOKOM bo w 
noAK/itosoM qio Buno/iHRiOT AByxMecTHyio 
onepauwK) "V, o>opMHpytOT abomhhnm Beiaop V, 
nMeioiuMH 3HaseHvie 5 MJiaAUJMx abommhux 
pa3pRAOB nOAG^OKa b 0 V <• bo mod 2 s 

(loc/ie 3Toro BunonHRiOT npeo6pa30BaHne 
noA6/iOKa bi HaA noA6/]OKOM Bbino/iHRiOT 
onepaumo ,, «<C2 ,, <- bi <«C 2 3aTeM 
HaA bi m noAK/iiOHOM qn Bbino/iHRiOT onepauktto 
W V m BbixoAHoe 3HaHeHne stom onepauMM 
npMCBaHBatoT 6iiOKy bi, hto moxho aanncaTb 
aHa/inTMsecKM cjieAyiomuM o6pa30M b^ <- 
b 1 *2 qn 3aTeM no Ta6/mue noACTaHOBKn c 
HOMepOM v Bbino/iHfliOT onepaumo noACTaHOBKM 
HaA noA6noKOM bi b-i <- Sy (bi) 3aTeM no 

3H3HeHMK) b{ (])OpMklpyiOT ABOMHHbiM BeKTOp V 

(AnR npeo6pa30BaHHR c/ieAytoiMero noA6/iOKa) 
V <- bi mod 2 s flocne 3Toro Bbino/iHRiOT 
npeo6pa30BaHvie noASnotca b2 b 2 <• 
b 2 <«C 3) b2 <- D2 *3 412M3aTeM b 2 <- S^bJ 
AHanomsHO Bwno/iHHioT npeo6pa30BaHMR 
noA6^0KOB ba, b 4 , bs, b 6 m b 7 Ha nocneAHeM 
ujare Ka*Aoro payHAa uun^pOBaHnq Bbino/iHRtOT 
nepecTaHOBicy nQA6/i0K0B b o6paTHOM nopRA^e, 
t e nonapHO mchriotcr MecTaMM 6/iokm b 7 m 
bo. bg m b,, b 5 m b 2 , b 4 m b 3 BTOpoft payHA 
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<- 1+1 M 



<• r+1 B 



Bbino/iH*teTCfl aHanorMHHO, 3a MOc/iKweHMeM 

TOrO, HTO 6M6CT0 nepBOM CTpOKM noAKntoMSM 

ncno/ib3yeTCfl BTOpaa CTpoxa noAKJuosefi 3aTeM 
Buno/iHneTcn TpeTviM payHA ujM<|)pOBaHMH c 
ncnonb30BaHneM TpeTbew ctpokm noAKJnoseM h 
t a Bcero Bbino/iHdeTcn R payHAOB 
ujwcfcpoBaHMH, rAB R = 4 C/ieAytotUMfi a/iropMTM 
npeACTasiineT co6om jiomsecKyio 4>opMy 
3anncn npMMepa 1 
AnropMTM 1 

Bxoa 128-6nTOBbiM bxoahom 6jiok 

UM0pOBblX ASHHblX, npeACTaBJieHHbJM K3K 
KO H K3T6 H3UI4 R 16-6nTOBUX nOAOHOKOB 

3H3K " | " o6o3HaHaeT onepauwio KOHicaTeHauMM 

1 YCTaHOBHTb MMCJIO payHAOB UJH^pOBaHMfl 
R - 4 M CS6TMMK HMCJ13 payHAOB T = 1 

2 YcTaHOBMTb cseTSMK i = 1 

3 npeo6pa30BaTb noAO/iOK bo bo <- 

bO<«C8r.7 ( 

bo <- boV7<?rO 

4 C(t>OpMMpOBaTb flBOWHHEJM BeKTOp V 

V <- dm mod 2 5 

5 npeo6pa30BaTb nofl6jiOK b 4 b, <- 
b, «<C 8r . 7+1 , 

t>i <- b, *8r-7*i Qn. 

b t <- 1 S v (b ( ), me onepaiinH 
noflCTaHOBKM 1 S V Buno/iHneTcn c noMOiMbio 

Ta6/lMUbt flOACTBHOBKM C H0M6p0M V 

6 C()>OpMMpOBaTb ABOMHHbIM BeKTOp V 

V <- b, mod 2 5 

7 EC/IM 1*7, TO npHpacTMTb I 
nepevrro k n 5 

8 Ecjim r*R, to npMpacTMTb r 
npOTMBHOM c/iynae nepeiiTM k n 10 

9 nepecTaBMTb noAbnoKM b o6paiHOM 
nopfl/u<e m nepemn k n 2 

10 CTOn 

BbixoA 128-OmoBbiM 6/iok wn^pTeKCTa 
C/ieAytoiUMM a/iropnTM onMCbmaeT 
npoueAypbi AetuM(t)poBaHMR 
AnropnTM 2 

Bxoa 128-6nTOBbiPi bxoahom 6/iok 

WM<t>pTeKCT3b | to | b | b | b \b | b |b 



1 yCTaHOBMTb MMCJIO payHAOB UJM<()pOBaHMfl 
R = 4 M CH6THMK HMCJia payHAOB r = 1 

2 YCTaHOBMTb CM6TMMK 1=1 

3 C(t>OpMMpOBaTb ABOMHHbIM BeKTOp V 

V<-b h1 mod2 5 

4 CoxpaHMTb 3HaneHMe b, b nepeMeHHOM g 

g<-t>i 

5 npeo6pa30BaTb noA6/iOK b, 
b,<- 1 S3 lw (b,) 

b,<-b,(V-7 + iqrt. 
bo <• bo >»Cy.7#, q^j, 

r' = 5 - r, U »>C U - onepauwfl UMicnMMecKoro 
CABwra BnpaBO Ha C 6mt m "(*)cV-7+r - 
onepamiq, o6paTHaa onepaunn "* s^^T (B 
onepauMRx " «<C X " m ">»C x " 3HaseHMH 
napaMeTpa C c oamhskobumm mhaskcsmm 
ycTaHaB/iMBatoTcq paBHUMM B 3tom c/iynae 
napa onepauMM "«<C X M m " >>> C x " RB/iaeTCR 
napoM B33MMH0 o6paTHbtx onepauMM ) 

6 CqbopMMpOBaTb abomshbim Beiaop v v <- 
gmod2 5 

7 Ecjim i*7, to npHpacTMTb t <- 1+1 M 
nepeMTM k n 4 
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8 npeo6pa30BaTb noA6/iOK bo bo <- 

b 0 (*)8r*-7 Ort 

bo<- bo »>C 8r '.7 

9 Ecnw r*R, to npHpacTMTb r <- r+1 B 
npOTMBHOM csiysae nepeMTM k n 11 

10 nepecTaBMTb noA&ViOKM b oGpaixoM 
nopflAxe m nepefrm k n 2 

11 don 

BblXOA 64-6MT0BWM 6/lOK MCXOAHOrO TeKCTa 

npM nporpaMMHOM pea/ikoaukiM anropurM 1 
vi anropMTM 2, peajiM3y»omMe aanB/ineMbiM 
cnocod, o6ecne4MBaioT CKOpocTb ujM4)pOBaHMR 
oko^o 30 M6mt/c Ann MMicponpoueccopa 
Pentium/200 npM Heo6xoAMMOCTM moxbt 6wTb 
3aAaH0 m Apyroe mucjio payHAOB, HanpuMep R = 
2, 3, 5, 6 

npMMep 2 

3tot npMMep nan$ieTcn aHajiomnHbiM 
npvtMepy 1, a OT/iMHue coctomt TOJibKO b tom, 
hto Hcno/ib3yeMbje 32 Ta6/iMUbi noACTaHOBOK 
flBJiniOTCfl ceKpeTHUMM, HanpMMep OHM 

<|)OpMMpyiOTCfl B 33BMCMM0CTM OT CeKpeTHOrO 

wuosa 3tot sapnaHT nB^neTcn zierKO 
peaiiM3yeMbiM npM ncno/ib30BaHMM 3BM a^r 
ujviqbpOBaHMn AaHHbix nyTeM 4)opMMpOBaHMR 
Ta6/iMu noACTaHOBOK c noMomwo cneuManbHOfi 
nporpaMMbi npM bboab ceKpeTHoro taitona b 

MOAy/1b LUM0pOBaHMfl Ct>OpMMpOBaHMe 

ceKpeTHbix Ta6^Mu MOxeT 6wrb peajiM30BaHO, 
HanpMMep, nyTeM MOAM0MunpOBaHMR 
M3BecTHbix (3apaHee 3aAaHHbix) Ta6/inu 
n0A0T3H0BKM nyTeM 6/iOHHoro ujM(t>pOBaHMR no 
cexpeixoMy k/iiohy 3/ieMeHTOB hmjkhgm cttjokm 

M3BeCTHblX Ta6/1MU (nOCKO/lbKy 6/lOHHOe 

ujMqbpyiOLMee npeo6pa3oeaHMe RB/ineTcn 

nOACTaHOBKOM, TO MOAMCj)MUMpOBaHHbJe 

Ta6/iMubi TaMce GyAyr RBJiRTbCR TaS/inuaMM 

nOACTaHOBOK) 

npMMep 3 

AaHHbiM npMMep TaKxe RB/iaeTCR 
aHa/iorvtMHbiM npMMepy 1 m noRCHReTCR Ha <J>nr 

3 OT/lMHMe COCTOMT B TOM, HTO BMeCTO 

<f)M KCMpOBaHHbix onepauMM 
noACTaHOBOK 1 Sy Mcno/ibsyiOTCR OAHOMecTHue 
onepauMM npeo6pa30BaHMR, saBMcnmMe ot 
ABOMMHoro Beiaopa V (V e cboio osepeAb 
33BMCMT ot BxoAHoro 6noxa UMQbpOBblX AaHHNX), 

KOTOpbie 0603HSMeHbJ K3K "(<S<y M 
(J)OpMMpyK)TCR Ha 3Tane ((>OpMMpOBaHM$1 

anropMTMa uiM<J)poBaHMR Hhabkc J o6o3HasaeT 
HOMep nosiiuHM onepauMM W (<S<)" OnepauMM 

"( <S<)" yCTaHaB/lMBaiOTCR B 33B m cm moctm ot 
3H3HeHMfl j 0=1, 2, 7R, TA6 R - HMC/IO 

payHAOB uiMct>poBaHMR) m ot ceKpeTHoro icniosa 
tcax OAHa M3 cjieAyioiMux nnTvi onepauMM 
" 1 Sv"\ "'Sv", "<«^v, m <«jr. -«<4V Bee 
nepesMC/ieHHbie onepauMM rbjiriotcr, 
aaBMCHiuMMM ot BxoAHoro 6/iOKa KaxAan M3 
AaHHbix onepauMM Bbtno/iHweTCR b 33bvicmmoctvi 
ot npeo6paayeMoro 6/iOKa a^khux, nocKO/ibicy 

0H3 3dBMCMT OT ABOMHHOPO BeKTOpa V ECJIM B 

HexoTopOM no3HUMH, nepBOHananbHO 
3ape3epBMpoB3HHOM noA onepauMio "(<S<)", 
ycTaHOB/ieHa onepauMR noAcraHOBKn, to OHa 
Bbtno/tHReTcn no Ta6^Mue c HOMepOM V, ec/iM 
ycTaHOB/ieHa onepauMn uwioiMHecKoro CABMra, 

TO BNnO/lHfleTCR UMKAMHeCKMM CABHf Ha V 6WT 
HMC/IO B03MO)KHblX MOAM0MK3HMM a/irOpMTMa 
LUM(J)pOBaHMR B A3HHOM npMMepe COCTaB/IReT B 

5 7R pa3 oo^biue, MeM b npMMepe 1 . hto 
cocTaanneT OKOiio 10 75 npn R=4 
npMMep 4 

3tot npMMep RB/iseTCR aHaJiorwsHbjM 
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npMMepy 3, a OT/inMne coctomt TO/ibKO b tom, 
hto ncnonb3yeMwe 32 TaS/inuu noACTaHOBOK 
HBJiRiOTCfl ceicpeTHbiMti, HanpwMep OHM 
<t)OpMkipyK)TCfl b 3aBMCMMOCTM ot ceicpeTHoro 
K/wona 3tot BapnaHT Tpe6yeT cocTaB/ieHvin 
6o/iee cnoxHOM nporpaMMu <J)opMMpOBaHM5i 
anropMTMa uiMcfcpoBaHMH, OAHaxo oh no3BO/ineT 

nOBbtCMTb KpHPTOCTOWKOCTb WM(J>pOBaHMfl npM 
COXpaHeHMM BbtCOKOM CKOpOCTM LJM^pOBaHUq. 

npneeAeHHbie npMMepw noKa3btBaioT t hto 
npeAnaraeMbtM cnoco6 KpnnTorpa0MHecKnx 
npeo6pa30BaHnvi 6jiokob 
TexHusecKM pe£mn3yeM n 
nocTaBneHHyio 3aAany. 

3aflB/iReMUH cnoco6 
peanM30BaH, Hanpuwep, Ha nepcoHanbHux 3BM 
m o6ecneMHBaeT B03M0XH0CTb co3AaHvin Ha ero 
ocHOBe CKOpocTHux nporpaMMHbix MOAy/ien 
Lunct>p08aHnq v\ 3aMeHbi AOporocTORiueM 
cneunanM3Mp0BaHH0fi annapaTypu 
LUM(t)poBaHMR nepcoHanbHOii 3BM, cHaSxceHHOtf 

npOrpaMMHOM CMCTeMOM CKOpOCTHOrO 



UM<t>pOBblX AaHHblX 

no3BO/meT peujMTb 

MO)K6T 6b)Tb 



mM(J)pOBaHMf1. 

OopMy/ia M3o6peTeHM«: 

1 Cn0CO6 UJM0pOBaHMH 6j10K08 UMCfcpOBbiX 
AHHHbJX, 3ai01K)HaHDmMMCfl B <t>OpMMpOBaHMM 

ceicpeTHoro witOHa, pa36neHnn 6/iOKa AaHHux Ha 
N>2 noA6/iOKOB m noonepeAHOM 
npeo6pa30BaHktn noA&VwiKOB nyTeM 

0CyiU6CTBJ16HVlR HaA t-TUM nQA^/IOKOM no 

KpaCiHeM Mepe oahom onepaunn 
npeo6pa30BaHvin, KOTOpaa aaBucm ot 3HaseHmi 
J-ro noA6/iOKa, rA£ j * i, OT^maioiuMMCH tsm, 
hto noc/ie 4)opMnpoBaHMfl ceicpeTHoro ic/iiona 
Aono/iHMTe/ibHO (J>opMMpyiOT anropmM 

LUMCflpOBaHHH B 3dBMCMM0CTV1 OT CeKpeTHOPO 

(oitosa nyTeM <t>opMMpOBaHHH no KpaftHeft Mepe 
oahom onepauuM npeo6pa3oaaHiifl, KOTOpyio 
ocyiuecTBJintOT HaA i-Tww noAoriOKOM b 
3aBHCMM0CTM ot Ro noASnoxa. 

2. Cnoco6 no n.1, oT/iMHaiomMMCH TeM, hto 
qbopMMpyiOT onepaumo npeo6pa30BaHnsi b BHAe 
onepauMH noACTaHOBKM. 
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